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EXAMINER'S AMENDMENT 

An examiner's amendment to the record appears below. Should the changes and/or 
additions be unacceptable to applicant, an amendment may be filed as provided by 37 CFR 
1.312. To ensure consideration of such an amendment, it MUST be submitted no later than the 
payment of the issue fee. 

Authorization for this examiner's amendment was given in a telephone interview with 
Anthony Barkume on June 24, 2005. 

1 . (Amended) In an intemetworked comput e r system comprising at least on e user comput e r, 
at l e ast on o merchant comput e r, and a v e rification comput e r interconn e ct e d to a comput e r 
network], a 

A.method of approving an online transaction between a.the user computer and a.tbe-merchant 
computer interconnected over a computer network, in conjunction with a payment card 
associated with the user computer, comprising the steps of 

a) transmitting a transaction request from the user computer to the merchant 
computer; 

b) transmitting a verification request from the merchant computer to a the 
verification computer, the verification request comprising a first data string associated with the 
payment card; 

c) storing the verification request at the verification computer in association with a 
transaction identifier and a verification data string; 
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d) transmitting the transaction identifier and the verification data string from the 
verification computer to the merchant computer; 

e) storing at the merchant computer (i) the verification data string as an expected 
verification data string, and (ii) the transaction identifier; 

f) transmitting from the merchant computer to the user computer the transaction 
identifier; 

g) the user computer transmitting to the verification computer (i) the transaction 
identifier, and (ii) a second data string associated with the payment card; 

h) the verification computer using the transaction identifier received from the user 
computer to retrieve the verification request previously stored by the verification computer with 
that received transaction identifier; 

i) the verification computer performing a verification step by using the first data 
string associated with the payment card retrieved from storage and the second data string 
associated with the payment card received from the user computer to verify if the transaction 
should be approved; 

j) upon successful verification that the transaction should be approved, the 
verification computer transmitting a verification approval message to the user computer, the 
verification approval message comprising the transaction identifier and the verification data 
string associated therewith as a confirmation verification data string; 

k) the user computer transmitting the verification approval message to the merchant 
computer; 
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1) the merchant computer using the transaction identifier in the verification approval 
message to retrieve an expected verification data string previously stored; 

m) the merchant computer comparing the expected verification data string with the 
confirmation verification data string from the verification approval message; and 

n) the merchant computer indicating that the transaction has been approved if the 
comparison is positive. 

2. (Original) The method of claim 1 wherein the verification request transmitted from the 
merchant computer to the verification computer further comprises an indication of a payment 
amount associated with the transaction request. 

3. (Original) The method of claim 2 wherein the verification step performed by the 
verification computer determines if an account associated with the payment card is sufficient to 
cover the payment amount in the verification request. 

4. (Original) The method of claim 3 wherein the transaction request comprises information 
associated with a product to be purchased by the user computer and the payment amount 
associated with the product. 

5. (Original) The method of claim 4 wherein the payment card is a debit card. 

6. (Original) The method of claim 5 wherein the first data string is an account number 
associated with the debit card, and wherein the second data string is a PIN associated with the 
debit card. 



7. 



(Original) The method of claim 4 wherein the payment card is a credit card. 
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8. (Original) The method of claim 7 wherein the first data string is an account number 
associated with the credit card. 

9. (Original) The method of claim 8 wherein the second data string is an expiration date 
associated with the credit card. 

10. (Original) The method of claim 8 wherein the second data string is a CW2 number 
associated with the credit card. 

1 1 . (Original) The method of claim 1 wherein the verification request transmitted from the 
merchant computer to the verification computer further comprises a merchant identifier. 

12. (Original) The method of claim 1 wherein the transaction identifier is generated by the 
verification computer. 

13. (Original) The method of claim 1 wherein the verification data string is generated by the 
verification computer. 

14. (Original) The method of claim 1 wherein the user computer is executing a web browser 
program, and wherein the user computer is caused to transmit to the verification conputer (i) the 
transaction identifier, and (ii) a second data string associated with the payment card, by a redirect 
command sent from the merchant computer to the user computer. 

1 5. (Original) The method of claim 1 wherein the user computer is executing a web browser 
program, and wherein the user computer is caused to transmit the verification approval message 
to the merchant computer by a redirect command sent from the verification computer to the user 
computer. 
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16. (Original) The method of claim 1 wherein the step of the user computer transmitting to 
the verification computer (i) the transaction identifier, and (ii) a second data string associated 
with the payment card, comprises the steps of: 

the user computer transmitting the transaction identifier to the verification computer; 

the verification conrqjuter requesting the user computer to transmit the second data string 
to the verification computer; and 

the user computer transmitting the second data string to the verification computer in 
response thereto. 

17. (Original) The method of claim 16 wherein the verification computer requests the user 
computer to transmit the second data string to the verification computer by sending a form to a 
browser program executing on the user computer, the form comprising a data entry field used by 
an operator of the user computer to enter the requested second data string. 

1 8. (Original) The method of claim 3 wherein the step of determining if an account 
associated with the payment card is sufficient to cover the payment amount in the verification 
request comprises the step of the verification computer communicating with a gateway con5)uter 
associated with an existing credit approval system. 

19. (Original) The method of claim 1 wherein the first data string associated with the 
payment card is obtained by the merchant computer as part of the transaction request transmitted 
by the user computer. 

20. (Original) The method of claim 1 wherein the first data string associated with the 
payment card is obtained by the merchant computer by retrieval firom storage. 

21 . (Original) A system for approving an online transaction comprising: 

a) a user computer; 

b) a merchant computer; and 

c) a verification computer; 



Application/Control Number: 09/737,080 
Art Unit: 3624 



Page 7 



said user computer, said merchant computer, and said verification conputer are 
interconnected to a computer network; 

wherein said onHne transaction is executed in conjunction with a payment card associated 
with said user computer; and further wherein: 

a) said user computer is programmed to transmit a transaction request to the 
merchant computer; 

b) said merchant computer is programmed to transmit a verification request to the 
verification computer, the verification request comprising a first data string associated with the 
payment card; 

c) said verification computer is programmed to (i) store the verification request in 
association with a transaction identifier and a verification data string, and (ii) transmit the 
transaction identifier and the verification data string to the merchant computer; 

d) said merchant conputer is further programmed to store (i) the verification data 
string as an expected verification data string, and (ii) the transaction identifier, and to transmit to 
the user computer the transaction identifier; 

e) said user conputer user computer is further programmed to transmit to the 
verification computer (i) the transaction identifier, and (ii) a second data string associated with 
the payment card; 

f) said verification conputer is further programmed to (i) use the transaction 
identifier received from the user coii5)uter to retrieve the verification request previously stored 
with that received transaction identifier, to (ii) perform a verification step by using the first data 
string associated with the payment card retrieved from storage and the second data string 
associated with the payment card received from the user computer to verify if the transaction 
should be approved, to (iii) transmit, upon successful verification that the transaction should be 
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approved, a verification approval message to the user computer, the verification approval 
message comprising the transaction identifier and the verification data string associated 
therewith as a confirmation verification data string; 

g) said user computer is further programmed to transmit the verification approval 
message to the merchant computer; 

h) said merchant computer is further programmed to (i) use the transaction identifier 
in the verification approval message to retrieve an expected verification data string previously 
stored, to (ii) compare the expected verification data string with the confirmation verification 
data string from the verification approval message, and to (iii) indicate that the transaction has 
been approved if the comparison is positive. 

22. (Original) The system of claim 2 1 wherein the verification request transmitted from the 
merchant computer to the verification computer further comprises an indication of a payment 
amount associated with the transaction request. 

23. (Original) The system of claim 22 wherein the verification computer is programmed to 
perform the verification step by determining if an account associated with the payment card is 
sufficient to cover the payment amoxint in the verification request. 

24. (Original) The system of claim 23 wherein the transaction request comprises information 
associated with a product to be purchased by the user computer and the payment amount 
associated with the product. 

25. (Original) The system of claim 24 wherein the payment card is a debit card. 

26. (Original) The system of claim 25 wherein the first data string is an account number 
associated with the debit card, and wherein the second data string is a PIN associated with the 
debit card. 
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27. (Original) The system of claim 24 wherein the payment card is a credit card. 

28. (Original) The system of claim 27 wherein the first data string is an account number 
associated with the credit card. 

29. (Original) The system of claim 28 wherein the second data string is an expiration date 
associated with the credit card. 

30. (Original) The system of claim 28 wherein the second data string is a CW2 number 
associated with the credit card. 

3 1 . (Original) The system of claim 2 1 wherein the verification request transmitted from the 
merchant computer to the verification computer further comprises a merchant identifier. 

32. (Original) The system of claim 2 1 wherein the verification con:5)uter is programmed to 
generate the transaction identifier. 

33. (Original) The system of claim 21 wherein the verification computer is programmed to 
generate the verification data string. 

34. (Original) The system of claim 2 1 wherein the user computer is further programmed to 
execute a web browser program, and wherein the user computer is caused to transmit to the 
verification computer (i) the transaction identifier, and (ii) a second data string associated with 
the payment card, by a redirect command sent from the merchant computer to the user computer. 

35. (Original) The system of claim 2 1 wherein the user computer is further programmed to 
execute a web browser program, and wherein the user computer is caused to transmit the 
verification approval message to the merchant computer by a redirect command sent from the 
verification computer to the user computer. 



Application/Control Number: 09/737,080 
Art Unit: 3624 



Page 10 



36. (Original) The system of claim 2 1 wherein the user computer is programmed to transmit 
to the verification computer (i) the transaction identifier, and (ii) a second data string associated 
with the payment card, by a process executing the steps of conprises the steps of: 

the user computer transmitting the transaction identifier to the verification con^uter, 
the verification computer requesting the user computer to transmit the second data string 
to the verification computer; and 

the user computer transmitting the second data string to the verification computer in 

response thereto. 

37. (Original) The system of claim 36 wherein the verification computer requests the user 
computer to transmit the second data string to the verification conputer by sending a form to a 
browser program executing on the user computer, the form comprising a data entry field used by 
an operator of the user computer to enter the requested second data string. 

38. (Original) The system of claim 23 wherein the step of determining if an account 
associated with the payment card is sufficient to cover the payment amount in the verification 
request comprises the step of the verification computer communicating with a gateway computer 
associated with an existing credit approval system. 

39. (Original) The system of claim 2 1 wherein the first data string associated with the 
payment card is obtained by the merchant computer as part of the transaction request transmitted 
by the user computer. 

40. (Original) The system of claim 2 1 wherein the first data string associated with the 
payment card is obtained by the merchant computer by retrieval from storage. 

4 1 . (Original) A method of a merchant conputer obtaining approval from a verification 
computer of an onHne transaction requested by a user conputer in conjunction with a payment 
card associated with the user computer, comprising the steps of 
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a) on receipt of a transaction request, the merchant computer transmitting a 
verification request to the verification computer, the verification request comprising a first data 
string associated with the payment card; 

b) storing the verification request at the verification computer in association with a 
transaction identifier and a verification data string; 

c) transmitting the transaction identifier and the verification data string fi-om the 
verification computer to the merchant computer; 

d) storing at the merchant computer (i) the verification data string as an expected 
verification data string, and (ii) the transaction identifier; 

e) transmitting the transaction identifier from the merchant computer to the 
verification computer via the user computer; 

f) the verification computer obtaining from the user computer a second data string 
associated with the payment card; 

g) the verification computer using the transaction identifier received from the 
merchant computer via the user computer to retrieve the verification request previously stored by 
the verification computer with that received transaction identifier; 

h) the verification computer performing a verification step by using the first data 
string associated with the payment card retrieved from storage and the second data string 
associated with the payment card received from the user computer to verify if the transaction 
should be approved; 

i) upon successful verification that the transaction should be approved, the 
verification computer transmitting a verification approval message to the merchant con5)uter via 
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the user computer, the verification approval message comprising the transaction identifier and 
the verification data string associated therewith as a confirmation verification data string; 

j) the merchant computer using the transaction identifier in the verification approval 
message to retrieve an expected verification data string previously stored; 

k) the merchant computer comparing the expected verification data string with the 
confirmation verification data string from the verification approval message; and 

1) the merchant computer indicating that the transaction has been approved if the 
comparison is positive. 

42. (Original) The method of claim 41 wherein the verification request transmitted from the 
merchant computer to the verification computer further comprises an indication of a payment 
amount associated with the transaction request. 

43. „ (Original) The method of claim 42 wherein the verification step performed by the 
verification computer determines if an account associated with the payment card is sufficient to 
cover the payment amount in the verification request. 

44. (Original) The method of claim 43 wherein the transaction request comprises information 
associated with a product to be purchased by the user computer and the payment amount 
associated with the product. 

45. (Original) The method of claim 44 wherein the payment card is a debit card. 

46. (Original) The method of claim 45 wherein the first data string is an account number 
associated with the debit card, and wherein the second data string is a PIN associated with the 
debit card. 
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47. (Original) The method of claim 44 wherein the payment card is a credit card, 

48. (Original) The method of claim 47 wherein the first data string is an account number 
associated with the credit card. 

49. (Original) The method of claim 48 wherein the second data string is an expiration date 
associated with the credit card. 

50. (Original) The method of claim 48 wherein the second data string is a CW2 number 
associated with the credit card. 

5 1 . (Original) The method of claim 4 1 wherein the verification request transmitted fi-om the 
merchant computer to the verification computer further comprises a merchant identifier. 

52. (Original) The method of claim 41 wherein the transaction identifier is generated by the 
verification computer. 

53. (Original) The method of claim 41 wherein the verification data string is generated by the 
verification computer. 

54. (Original) The method of claim 41 wherein transaction identifier is transmitted fi*om the 
merchant computer to the verification computer via the user computer by the merchant computer 
issuing a redirect command to the user computer. 

55. (Original) The method of claim 41 wherein the verification approval message is 
transmitted from the verification computer to the merchant computer via the user computer by 
the verification computer issuing a redirect command to the user computer. 

56. (Original) The method of claim 4 1 wherein the verification computer obtains the second 
data string associated with the payment card by a request issued to the user computer. 
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57. (Original) The method of claim 56 wherein the verification computer requests the user 
computer to transmit the second data string to the verification computer by sending a form to a 
browser program executing on the user computer, the form comprising a data entry field used by 
an operator of the user computer to enter the requested second data string. 

58. (Original) The method of claim 43 wherein the step of determining if an account 
associated with the payment card is sufficient to cover the payment amount in the verification 
request comprises the step of the verification computer communicating with a gateway computer 
associated with an existing credit approval system. 

59. (Original) The method of claim 41 wherein the first data string associated with the 
payment card is obtained by the merchant computer as part of the transaction request. 

60. (Original) The method of claim 41 wherein the first data string associated with the 
payment card is obtained by the merchant computer by retrieval from storage. 

6 1 . (Previously presented) A system for approving an online transaction comprising: 

a) a merchant computer; and 

b) a verification con5)uter; 

said merchant computer and said verification computer are interconnected to a computer 
network; 

wherein said online transaction is executed in conjunction with a payment card; and 
further wherein: 

a) said merchant computer is programmed to receive a transaction request and in 
response thereto transmit a verification request to the verification computer, the verification 
request comprising a first data string associated with the payment card; 
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b) said verification computer is programmed to (i) store the verification request in 
association with a transaction identifier and a verification data string, and (ii) transmit the 
transaction identifier and the verification data string to the merchant computer; 

c) said merchant computer is further programmed to store (i) the verification data 
string as an expected verification data string, and (ii) the transaction identifier, and to transmit 
the transaction identifier to the verification computer via a user computer interconnected to the 
computer network; 

d) said verification computer is further programmed to (i) use the transaction 
identifier received from the merchant computer via the user computer to retrieve the verification 
request previously stored with that received transaction identifier, (ii) obtain a second data string 
associated with the payment card from a user computer (iii) perform a verification step by using 
the first data string associated with the payment card retrieved from storage and the second data 
string associated with the payment card received from the user computer to verify if the 
transaction should be approved, to (iv) transmit, upon successful verification that the transaction 
should be approved, a verification approval message to the merchant computer via the user 
computer, the verification approval message comprising the transaction identifier and the 
verification data string associated therewith as a confirmation verification data string; 

e) said merchant computer is further programmed to (i) use the transaction identifier 
in the verification approval message to retrieve an expected verification data string previously 
stored, to (ii) compare the expected verification data string with the confirmation verification 
data string from the verification approval message, and to (iii) indicate that the transaction has 
been approved if the conq^arison is positive. 

62. (Original) The system of claim 6 1 wherein the verification request transmitted from the 
merchant computer to the verification computer further comprises an indication of a payment 
amount associated with the transaction request. 



Application/Control Number: 09/737,080 Page 1 6 

Art Unit: 3624 

63. (Original) The system of claim 62 wherein the verification computer is programmed to 
perform the verification step by determining if an account associated with the payment card is 
sufficient to cover the payment amount in the verification request. 

64. (Original) The system of claim 63 wherein the transaction request comprises information 
associated with a product to be purchased by the user computer and the payment amount 
associated with the product. 

65. (Original) The system of claim 64 wherein the payment card is a debit card. 

66. (Original) The system of claim 65 wherein the first data string is an account number 
associated with the debit card, and wherein the second data string is a PIN associated with the 
debit card. 

67. (Original) The system of claim 64 wherein the payment card is a credit card. 

68. (Original) The system of claim 67 wherein the first data string is an account number 
associated with the credit card. 

69. (Original) The system of claim 68 wherein the second data string is an expiration date 
associated with the credit card. 

70. (Original) The system of claim 68 wherein the second data string is a CW2 number 
associated with the credit card. 

7 1 . (Original) The system of claim 6 1 wherein the verification request transmitted from the 
merchant computer to the verification computer further comprises a merchant identifier. 

72. (Original) The system of claim 61 wherein the verification computer is programmed to 
generate the transaction identifier. 
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73. (Original) The system of claim 61 wherein the verification computer is programmed to 
generate the verification data string. 

74. (Original) The system of claim 61 wherein the merchant computer is programmed to 
transmit the transaction identifier to the verification computer via the user computer by issuing a 
redirect command to the user computer. 

75. (Original) The system of claim 61 wherein the verification computer is programmed to 
transmit the verification approval message to the merchant computer via the user computer by 
issuing a redirect command to the user computer. 

76. (Original) The system of claim 6 1 wherein the verification computer is programmed to 
obtain the second data string associated with the payment card by a request issued to the user 
computer, 

77. (Original) The system of claim 76 wherein the verification computer requests the user 
computer to transmit the second data string to the verification computer by sending a form to a 
browser program executing on the user computer, the form comprising a data entry field used by 
an operator of the user computer to enter the requested second data string. 

78. (Original) The system of claim 63 wherein the step of determining if an account 
associated with the payment card is sufficient to cover the payment amount in the verification 
request comprises the step of the verification computer communicating with a gateway computer 
associated with an existing credit approval system. 

79. (Original) The system of claim 6 1 wherein the first data string associated with the 
payment card is obtained by the merchant computer as part of the transaction request transmitted 
by the user computer. 
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80. (Original) The system of claim 61 wherein the first data string associated with the 
payment card is obtained by the merchant computer by retrieval from storage. 

8 1 . (Amended) In an int e motworlc e d comput e r system comprising at l e ast one us e r comput e r, 
at l e ast on e m e rchant computer, and a verification computer int e rconnect e d to a conputer 
network, a 

A_method of the a.verification computer approving an online transaction between the a.user 
computer and ^ a^merchant conputer interconnected over a computer network, in conjunction 
with a payment card associated with the user computer, comprising the steps of 

a) receiving a verification request from a the merchant computer, the verification 
request comprising a first data string associated with the payment card; 

b) storing the verification request in association with a transaction identifier and a 
verification data string; 

c) transmitting the transaction identifier and the verification data string to the 
merchant computer; 

d) receiving from the user computer (i) the transaction identifier, said transaction 
identifier having been previously transmitted from the merchant computer to the user computer, 
and (ii) a second data string associated w;th the payment card; 

e) using the transaction identifier received from the user computer to retrieve the 
verification request previously stored with that received transaction identifier; 

f) performing a verification step by using the first data string associated with the 
payment card retrieved from storage and the second data string associated with the payment card 
received from the user computer to verify if the transaction should be approved; and 
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g) upon successful verification that the transaction should be approved, transmitting 
a verification approval message to the user computer, the verification approval message 
comprising the transaction identifier and the verification data string associated therewith as_a 
confirmation verification data string; 

wherebv upon receipt of the verification approval message, and the user computer 
transmitting the verification approval message to the merchant computer, an d the merchant 
computer using the transaction identifier in the verification approval message t o retrieve an 
expected verification data string previouslv stored; 

and the merchant computer comparing the expected verification data string with the 
confirmation verification data string from the verification approval message; then the merchant 
computer indicates that the transaction has been approved if the comparison is positive. 

82. (Original) The method of claim 8 1 wherein the verification request received by the 
verification computer further comprises an indication of a payment amount associated with the 
transaction request . 

83. (Original) The method of claim 82 wherein the verification step determines if an account 
associated with the payment card is sufficient to cover the payment amount in the verification 
request. 

84. (Original) The method of claim 8 1 wherein the payment card is a debit card. 

85. (Original) The method of claim 84 wherein the first data string is an account number 
associated with the debit card, and wherein the second data string is a PIN associated with the 
debit card. 



86. 



(Original) The method of claim 8 1 wherein the payment card is a credit card. 
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87. (Original) The method of claim 86 wherein the first data string is an account number 
associated with the credit card. 

88. (Original) The method of claim 87 wherein the second data string is an expiration date 
associated with the credit card. 

89. (Original) The method of claim 87 wherein the second data string is a CW2 number 
associated with the credit card. 

90. (Original) The method of claim 8 1 wherein the verification request received by the 
verification computer further comprises a merchant identifier. 

91 . (Original) The method of claim 81 wherein the transaction identifier is generated by the 
verification computer. 

92. (Original) The method of claim 81 wherein the verification data string is generated by the 
verification computer. 

93 . (Original) The method of claim 8 1 wherein the step of receiving from the user computer 
(i) the transaction identifier, and (ii) a second data string associated with the payment card 
comprises: 

the verification computer receiving the transaction identifier from the user computer; 

the verification computer requesting the user computer to transmit the second data string 
to the verification computer; and 

the verification con:5)uter receiving the second data string from the user computer in 
response thereto. 

94. (Original) The method of claim 93 wherein the verification computer requests the user 
computer to transmit the second data string to the verification computer by sending a form to a 
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brows« program executing on .he user con,puter, fl,e form comprising a data entr, field used b, 
an operator of the user computer to enter the requested second data stnng. 

95 (Original) The method of claim 83 wherein the step of determining if an account 
associated with the payment c^d is sufficient to cover the payment an^un. in the ver,ficat,on 
request comprises the step of communicating with a gateway computer assocrated w,th an 
existing credit approval system. 



96. (Currently Amended) A verification computer for approving an online transaction 
between a user computer and a merchant computer, comprising: 

means for communicating with each of the user computer and the merchant 

computer over a computer network; 

processing means programmed to: 

a) receive a verification request from a merchant computer, the verification request 
comprising a first data string associated with the payment card; 

b) store the verification request in association with a transaction identifier and a 

verification data string; 



c) 

computer; 



transmit the transaction identifier and the verification data string to the merchant 



d) receive from the user computer (i) the transaction identifier, said transaction 
identifier having been previously transmitted from the merchant computer to the user conputer, 
and (ii) a second data string associated with the payment card; 

e) use the transaction identifier received from the user computer to retrieve the 
verification request previously stored with that received transaction identifier; 



Application/Control Number: 09/737,080 
Art Unit: 3624 



Page 22 



f) perform a verification step by using the first data string associated with the 



payment card retrieved fi-om storage 



and the second data string associated with the payment card 



received from the user computer to verify if the transaction should be approved; and 

g) upon successful verification that the transaction should be approved, transmit a 
verification approval message to the user computer, the verification approval message 
comprising the transaction identifier and the verification data string associated therewith asa 
rnnfirmatio " verificatio n data string; 

..■h^r^u,, .,r.. ....^ pt of the veri fication appr oval mess . pe and the user computer 

the venfic ^-^---- ' ^^^^^-^ ^""^P"^^*" "^''''^'"^ 

..^p,.t.r ndnP the ir -^^^'^^^^r. ,-H.ntifier in the verifiration approval messape to retneve an 

py pected verifir■?^tinn data strinp prev iously stored; 

..H th. rnerchant com puter comparing the ex pected verific ation data sirin g with the 
confinnto-nfica^^ 

..^.t.r indicates t^^^ ^v,. transaction ha s be e n approved i f the com parison is positive . 

97 (Original) The verification computer of claim 96 wherein the processing means is further 
programmed to utilize an indication of a payment amount associated with a transaction request. 

98. (Original) The verification computer of claim 97 wherein the processing means is fiirther 
programmed to determine if an account associated with the payment card is sufficient to cover 
the payment amount in the verification request. 

99. (Original) The verification computer of claim 96 wherein the processing means is further 
programmed to receive the transaction identifier from the user computer; to request the user 
computer to transmit the second data string to the verification computer; and to receive the 
second data string from the user computer in response thereto. 
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100. (Original) The verification computer of claim 99 wherein the processing means is further 
programmed to request the user computer to transmit the second data string to the verification 
computer by sending a form to a browser program executing on the user computer, the form 
comprising a data entry field used by an operator of the user computer to enter the requested 
second data string. 

101 . (Original) The verification computer of claim 98 wherein the processing means is further 
programmed to determine if an account associated with the payment card is sufficient to cover 
the payment amount in the verification request by communicating with a gateway computer 
associated with an existing credit approval system. 

1 02 . (Amended) In an int e m e tworked comput e r syst e m comprising at least on e user comput e r, 
at l e ast one merchant conyutcr, and a v e rification computer int e rconn e cted to a comput e r 
network, a 

A^method of a.the merchant computer obtaining approval for an online transaction between the a 
user computer and the merchant computer in conjunction with a payment card associated with 
the user computer, comprising the steps of 

a) receiving a transaction request from the user computer; 

b) transmitting a verification request to the a^verification computer, the verification 
requei;t comprising a first data string associated with the payment card; 

c) receiving from the verification computer a transaction identifier and a verification 
data string; 

d) storing (i) the verification data string as an expected verification data string, and 
(ii) the transaction identifier; 
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e) transmitting to the verification computer via the user computer the transaction 
identifier; 

f) receiving from the verification computer via the user computer a verification 
approval message, the verification approval message comprising the transaction identifier and a 
verification data string associated therewith as a confirmation verification data string; 

g) using the transaction identifier in the verification approval message to retrieve an 
expected verification data string previously stored; 

h) comparing the expected verification data string with the confirmation verification 
data string from the verification approval message; and 

i) indicating that the transaction has been approved ifthe comparison is positive. 

1 03 (Original) The method of claim 1 02 wherein the verification request transmitted to the 
verification computer fiirther comprises an indication of a payment amount associated with the 
transaction request. 

1 04. (Original) The method of claim 1 03 wherein the transaction request comprises 
information associated with a product to be purchased by the user computer and the payment 
amount associated with the product. 

105. (Original) The method of claim 102 wherein the verification request transmitted from the 
merchant computer to the verification computer fiirther comprises a merchant identifier. 



1 06. (Original) The method of claim 1 02 wherein the transaction identifier is generated by 
verification computer. 
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107. (Original) The method of claim 102 wherein the verification data string is generated by 
the verification computer. 

108. (Original) The method of claim 102 wherein the step of transmitting to the verification 
computer via the user computer the transaction identifier comprises sending a redirect command 
to the user computer. 

109. (Original) The method of claim 102 wherein the first data string associated with the 
payment card is obtained by the merchant computer as part of the transaction request transmitted 
by the user computer. 

110. (Original) The method of claim 102 wherein the first data string associated with the * 
payment card is obtained by the merchant computer by retrieval from storage. 

111. (Original) A merchant computer for executing an online transaction with a user computer 
on approval by a verification computer, comprising: 

means for communicating with each of the user computer and the verification 
computer over a computer network; 

processing means programmed to: 

a) receive a transaction request from the user computer; 

b) transmit a verification request to the verification computer, the verification 
request comprising a first data string associated with the payment card; 

c) receive from the verification computer a transaction identifier and a verification 
data string; 

d) store (i) the verification data string as an expected verification data string, and (ii) 
the transaction identifier; 
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e) transmit to the verification computer via the user computer the transaction 
identifier; 

f) receive from the verification computer via the user computer a verification 
approval message, the verification approval message comprising the transaction identifier and a 
verification data string associated therewith as a confirmation verification data string; 

g) use the transaction identifier in the verification approval message to retrieve an 
expected verification data string previously stored; 

h) comparing the expected verification data string with the confirmation verification 
data string from the verification approval message; and 

i) indicating that the transaction has been approved if the comparison is positive. 

1 12. (Original) The merchant computer of claim 1 1 1 wherein the processing means is fiirther 
programmed to include in the verification request transmitted to the verification computer an 
indication of a payment amount associated with the transaction request. 

113. (Original) The merchant computer of claim 1 1 1 wherein the processing means is further 
programmed to transmitting to the verification computer via the user computer the transaction 
identifier by sending a redirect command to the user computer. 
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Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Charles Kyle whose telephone number is (571) 272-6746. The 
examiner can normally be reached on 6:30 to 3:00. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Vincent Millin can be reached on (571) 272-6747. The fax phone number for the 
organization where this application or proceeding is assigned is 703-872-9306. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). 

crk Examiner Charles Kyle 



June 24, 2005 
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Allowable Subject Matter 

Claims 1-1 13 are allowed. 

The following is an examiner's statement of reasons for allowance: The best prior art of 
record, US 2001/0025271 Allen neither discloses nor fairly suggests limitations recited in claims 
1-20, 41-60, 81-95 and 102-1 10. These limitations include method steps wherein a verification 
data string and transaction identifier are sent to a merchant computer; a confirmation verification 
data string and transaction identifier are sent to a user computer which then forwards these to the 
merchant computer; the merchant computer uses the transaction identifier to retrieve the 
originally received verification data string; and the merchant computer compares the verification 
data string and confirmation verification data string to approve the transaction identified by the 
transaction identifier. Additionally, these steps are performed in conjunction with a separate 
verification process comprising use of a first data string supplied by the merchant computer to 
the verification computer and a second data string provided by the user computer to the 
verification computer. 

The best prior art of record, US 2001/0025271 Allen neither discloses nor fairly suggests 
limitations recited in claims 21-40, 61-80, 96-101 and 1 1 1-1 13. These limitations include 
system elements to provide functionalities of sending a verification data string and transaction 
identifier to a merchant computer; sending a confirmation verification data string and transaction 
identifier to a user computer which then forwards these to the merchant computer; the merchant 
computer using the transaction identifier to retrieve the originally received verification data 
string; and the merchant computer comparing the verification data string and confirmation 
verification data string to approve the transaction identified by the transaction identifier. 
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Additionally, other elements provide a separate verification process comprising use of a first data 
string supplied by the merchant computer to the verification computer and a second data string 
provided by the user computer to the verification computer. 

Any comments considered necessary by applicant must be submitted no later than the 
payment of the issue fee and, to avoid processing delays, should preferably accompany the issue 
fee. Such submissions should be clearly labeled "Comments on Statement of Reasons for 
Allowance." 

Conclusion 

The prior art made of record and not relied upon is considered pertinent to appUcant's 
disclosure. The references are cited for their general teachings in the environment of credit card 
processing and transaction security. 



US 2001/0025271 Al 07-2001 

US 6,254,000 Bl 07-2001 

US 6,834,271 Bl 12-2004 

US 6,910,023 06-2005 

US 5,815,657 09-1998 

JP02002 15738 05-2002 
DFW.ocm webpage 



Allen 
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Hodgson et al 
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Williams et al 
Histatomi et al 
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with US Dept. of Commerce 
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